Privacy Policy
Last updated: April 2025 | Effective: April 2025
📑 Table of Contents
1. Information We Collect
We collect information that you voluntarily provide to us when placing an order or contacting our support team.
Personal Information You Provide:
- Identity Data: Name, date of birth (for age verification)
- Contact Data: Email address, shipping address, phone number (optional)
- Order Data: Products purchased, order history, shipping preferences
- Communication Data: Livechat transcripts, email correspondence
Automatically Collected Information:
- Technical Data: IP address, browser type, device information
- Usage Data: Pages visited, time spent on site, referral source
Important: We do not collect or store payment card information because payments are processed off-site via payment instructions sent by email. No financial data is stored on our servers.
2. How We Use Your Information
We use your personal information for the following purposes:
| Purpose | Legal Basis (GDPR) |
|---|---|
| Process and fulfil your orders | Contract performance |
| Send order confirmations and payment instructions | Contract performance |
| Provide shipping updates and tracking | Contract performance |
| Respond to customer support inquiries (livechat/email) | Legitimate interest |
| Verify age (18+ requirement) | Legal obligation |
| Prevent fraud and maintain site security | Legitimate interest |
| Improve our website and services | Legitimate interest |
4. Data Security
We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction.
- Encryption: Our website uses SSL/TLS encryption (HTTPS) to secure data transmission.
- Access Controls: Only authorised personnel have access to customer data.
- Secure Hosting: Our servers are protected by firewalls and regular security monitoring.
While we strive to protect your data, no method of transmission over the internet is 100% secure. You use our website at your own risk.
5. Data Retention
We retain your personal information only for as long as necessary to fulfil the purposes outlined in this policy:
- Order Data: Retained for 6 years (UK tax and legal requirements)
- Customer Support Records: Retained for 2 years after last interaction
- Livechat Transcripts: Retained for 12 months
- Usage Data: Retained for 12 months for analytics purposes
You may request deletion of your data at any time (subject to legal retention obligations).
6. Your Rights Under GDPR
If you are located in the United Kingdom or the European Economic Area (EEA), you have the following rights under the General Data Protection Regulation (GDPR):
Right to Access
Request a copy of your personal data
Right to Rectification
Correct inaccurate or incomplete data
Right to Erasure
Request deletion of your data ("right to be forgotten")
Right to Restriction
Limit how we use your data
Right to Portability
Receive your data in a machine-readable format
Right to Object
Object to processing based on legitimate interests
To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days.
8. Children's Privacy
Our website and services are not intended for individuals under the age of 18. We do not knowingly collect personal information from minors. If we discover that we have inadvertently collected data from someone under 18, we will delete it immediately.
If you believe a minor has provided us with personal information, please contact us so we can remove the data.
9. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any updates will be posted on this page with a revised "Last updated" date.
We encourage you to review this page periodically. Your continued use of our website after any changes constitutes acceptance of the updated policy.
10. Contact Us
If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us:
📧 Email: [email protected]
💬 Livechat: Available on our website – almost instant response
📝 Data Protection Requests: Please include "Privacy Request" in the subject line
For general inquiries, please visit our Contact page.
City Choice Pharmacy — Your privacy is our priority.